$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/431a515b-07a5-4778-abb4-267624108e41.roa File: 431a515b-07a5-4778-abb4-267624108e41.roa (raw, json) Hash identifier: OGiY62derrU/kFIT4kEfksND91xDjCBppPVhuyvhLP4= Subject key identifier: 76:49:34:3A:38:85:43:0F:03:E4:85:9E:71:05:C6:D1:29:C1:AB:8D Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2B68C029D49B5B598CBA37B1CCF3A1FD19633678 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/431a515b-07a5-4778-abb4-267624108e41.roa Signing time: Fri 26 Sep 2025 17:51:30 +0000 ROA not before: Fri 26 Sep 2025 17:51:30 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:30d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:68:c0:29:d4:9b:5b:59:8c:ba:37:b1:cc:f3:a1:fd:19:63:36:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 26 17:51:30 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=dad9d22a272348e2950035af3422bf797de0c5dc24b4d4ff822c7e7b2f9d51eb, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f7:39:2b:52:a1:de:83:53:18:c2:eb:51:4f: 97:b2:6d:2b:77:98:b8:22:97:9b:d1:0f:d8:11:3c: db:15:d1:a6:26:14:68:32:0e:8d:ad:8d:2d:3e:b0: cc:ec:c0:bc:7c:43:63:d5:c7:6d:36:53:62:0d:3e: 02:c6:f5:47:d4:b1:d8:40:18:75:f0:ed:1f:55:f0: 45:86:76:90:4a:b0:e6:cc:d8:c4:17:7e:97:e5:af: 5c:19:80:f7:a8:d9:1b:49:b2:9a:7d:f5:ba:c1:c1: 20:87:81:21:90:42:0e:5d:f0:ae:f7:05:3c:08:3e: 38:20:10:1f:07:b3:38:0e:bf:6f:89:a8:70:83:25: 8f:d0:2b:b9:23:31:60:4e:75:26:b4:36:22:9d:c6: 17:bc:ff:af:dd:ca:b9:a4:e7:68:4e:c6:df:4f:ff: a2:67:d7:5c:81:ee:f4:16:20:4d:39:0a:c9:6c:c7: fb:4a:0e:01:cc:7a:36:a1:04:00:90:c8:b0:07:20: b2:c1:8f:1f:26:05:40:60:c6:50:6e:da:90:b1:02: 2d:13:41:a2:27:3b:b9:de:93:28:b6:6d:e2:e5:1f: 6c:1f:60:d2:5c:31:72:a7:4f:f7:f9:79:62:9f:b3: 9e:4f:f5:d7:9b:ae:26:ea:ad:eb:17:ee:c4:2b:f4: 7c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:49:34:3A:38:85:43:0F:03:E4:85:9E:71:05:C6:D1:29:C1:AB:8D X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/431a515b-07a5-4778-abb4-267624108e41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30d::/48 Signature Algorithm: sha256WithRSAEncryption 38:f8:ad:be:f9:19:c9:65:30:96:55:93:cd:c7:49:7e:3f:d4: 80:ef:16:cb:43:8e:12:31:5d:b9:52:3f:3b:6f:d2:d1:d5:d0: 86:d9:c8:e7:f1:17:dc:58:8c:ac:54:cf:fa:13:45:a4:b2:2e: 6e:e7:11:be:50:52:ac:34:b7:66:18:8e:c3:e1:ed:ef:71:42: 8d:46:26:f8:e8:76:b2:8b:05:3d:81:0c:78:5f:64:b9:64:30: 2b:62:44:96:44:5c:9a:64:84:e1:95:25:3a:2b:8a:01:f6:4f: 9f:9e:69:2d:bb:4c:1a:9a:ad:75:ad:0a:4f:14:16:80:87:dd: 43:6b:3a:d1:42:48:44:fb:af:27:ec:94:8c:3a:3d:65:8c:60: f4:89:4f:76:bd:95:01:9f:b1:72:87:df:d0:78:9b:93:d9:ca: 59:39:b1:2f:e0:69:b2:6f:05:1b:67:36:e5:e3:81:c1:5d:09: fb:41:54:46:4b:1a:32:fc:da:c8:94:16:7b:a0:15:65:c7:38: 3a:4f:cb:90:39:44:22:66:80:ab:04:8a:da:77:6b:b7:b1:ae: 1b:45:56:66:61:db:5c:4e:10:4c:9d:fe:48:cb:b1:06:fe:ca: 22:2b:f8:50:0a:ae:c2:fc:4c:48:3c:2d:e0:d1:69:95:07:6f: 56:a0:78:b6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUK2jAKdSbW1mMujexzPOh/RljNngwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTI2MTc1MTMwWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYWQ5ZDIyYTI3MjM0OGUyOTUwMDM1YWYzNDIyYmY3OTdk ZTBjNWRjMjRiNGQ0ZmY4MjJjN2U3YjJmOWQ1MWViMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDi9zkrUqHeg1MYwutRT5eybSt3mLgil5vRD9gRPNsV0aYm FGgyDo2tjS0+sMzswLx8Q2PVx202U2INPgLG9UfUsdhAGHXw7R9V8EWGdpBKsObM 2MQXfpflr1wZgPeo2RtJspp99brBwSCHgSGQQg5d8K73BTwIPjggEB8HszgOv2+J qHCDJY/QK7kjMWBOdSa0NiKdxhe8/6/dyrmk52hOxt9P/6Jn11yB7vQWIE05Csls x/tKDgHMejahBACQyLAHILLBjx8mBUBgxlBu2pCxAi0TQaInO7nekyi2beLlH2wf YNJcMXKnT/f5eWKfs55P9debribqresX7sQr9HxBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdkk0OjiFQw8D5IWecQXG0SnBq40wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQzMWE1MTViLTA3YTUtNDc3OC1hYmI0LTI2NzYyNDEwOGU0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAw0wDQYJKoZIhvcNAQELBQADggEBADj4rb75GcllMJZVk83HSX4/ 1IDvFstDjhIxXblSPztv0tHV0IbZyOfxF9xYjKxUz/oTRaSyLm7nEb5QUqw0t2YY jsPh7e9xQo1GJvjodrKLBT2BDHhfZLlkMCtiRJZEXJpkhOGVJTorigH2T5+eaS27 TBqarXWtCk8UFoCH3UNrOtFCSET7ryfslIw6PWWMYPSJT3a9lQGfsXKH39B4m5PZ ylk5sS/gabJvBRtnNuXjgcFdCftBVEZLGjL82siUFnugFWXHODpPy5A5RCJmgKsE itp3a7exrhtFVmZh21xOEEyd/kjLsQb+yiIr+FAKrsL8TEg8LeDRaZUHb1ageLY= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:39 2025 by rpki-client